Runtime

com.formathoPublished by formatho.comOfficial publisherv0.3.0Updated Oct 24, 2026

Self-hosted MCP server: 26 deterministic dev, security, and EVM tools.

VerifiedStreamable HTTPWeb executableFinanceDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Self-hosted MCP server exposing 26 deterministic dev, security, and EVM/Web3 utility tools for formatting, encoding, hashing, and decoding.

What you can do
  • Format, minify and validate JSON, and convert text case or generate URL slugs
  • Encode and decode Base64, hex, and percent-encoded URLs
  • Hash text (md5/sha1/sha256/sha384/sha512), generate UUID v4 and random strings, decode JWTs without verification
  • Compute EVM values: keccak-256, function selectors, CREATE2 addresses, storage slots, calldata decoding, EIP-55 checksums, wei/gwei/ether conversion
  • Work with Uniswap v4 hook permissions and EIP-4626 vault share/asset math
  • Convert timestamps, test regular expressions, and list the server's registered tools
When to use it
Useful when an assistant needs quick, exact, offline-style conversions and checks while working on code, API payloads, or Ethereum contracts, without sending data to third-party services.
Requirements
Runs as a remote streamable HTTP endpoint or as a local Docker container (stdio). No authentication, environment variables, or headers are declared.
Before you install
jwt.decode does not verify signatures, so decoded claims are untrusted. MD5/SHA1 are compatibility-only, not security. EVM tools compute values but do not sign or send transactions.

Installation

In SourceWeft

  1. Open Runtime in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.formatho%2Fruntime/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "runtime": {
      "type": "http",
      "url": "https://mcp.formatho.com/mcp"
    }
  }
}

Tools

26

json.format

Validate and pretty-print JSON with a configurable indent level. [data · v1.0.0 · deterministic: true · permissions: none]

Parametersjsonrequiredindent

json.minify

Validate JSON and strip all insignificant whitespace. [data · v1.0.0 · deterministic: true · permissions: none]

Parametersjsonrequired

json.validate

Validate JSON and report the parse error position if invalid. [data · v1.0.0 · deterministic: true · permissions: none]

Parametersjsonrequired

base64.encode

Base64-encode text (standard alphabet). [data · v1.0.0 · deterministic: true · permissions: none]

Parameterstextrequired

base64.decode

Base64-decode to text. [data · v1.0.0 · deterministic: true · permissions: none]

Parametersbase64required

url.encode

Percent-encode text (component encoding). [network · v1.0.0 · deterministic: true · permissions: none]

Parameterstextrequired

url.decode

Decode percent-encoded text. [network · v1.0.0 · deterministic: true · permissions: none]

Parameterstextrequired

slug.generate

Convert text to a URL-safe kebab-case slug. [dev · v1.0.0 · deterministic: true · permissions: none]

Parameterstextrequired

hash.text

Hash text with md5/sha1/sha256/sha384/sha512 (hex output). MD5/SHA1 are for compatibility checks only, not security. [security · v1.0.0 · deterministic: true · permissions: none]

Parameterstextrequiredalgorithm

uuid.v4

Generate random UUID v4 values. [security · v1.0.0 · deterministic: false · permissions: none]

Parameterscount

random.string

Generate a cryptographically random alphanumeric string. [security · v1.0.0 · deterministic: false · permissions: none]

Parameterslength

jwt.decode

Decode a JWT (JWS compact serialization) header and claims WITHOUT verifying the signature. Reports expiry status from the exp claim. [security · v1.0.0 · deterministic: true · permissions: none]

Parameterstokenrequired

evm.keccak256

Keccak-256 (Ethereum flavor, NOT NIST SHA3-256) of arbitrary hex or text. [web3 · v1.0.0 · deterministic: true · permissions: none]

Parametersdatarequiredencoding

evm.function_selector

Compute the 4-byte function selector from a canonical signature, with reverse lookup against common signatures. [web3 · v1.0.0 · deterministic: true · permissions: none]

Parametersselectorsignature

evm.create2_address

Compute the deterministic CREATE2 address: keccak256(0xff ‖ factory ‖ salt ‖ initCodeHash)[12:]. [web3 · v1.0.0 · deterministic: true · permissions: none]

ParameterssaltrequiredfactoryrequiredinitCodeHashrequired

evm.storage_slot

Compute Solidity storage slots: simple variables, mapping values (keccak(key ‖ p)), and dynamic array elements (keccak(p) + index). [web3 · v1.0.0 · deterministic: true · permissions: none]

ParameterskindkeyHexbaseSlotrequiredarrayIndex

evm.decode_calldata

Extract the 4-byte selector from raw calldata, match it against common signatures, and decode static (word-based) arguments: address, uint256, int256, bytes32, bool. [web3 · v1.0.0 · deterministic: true · permissions: none]

Parameterscalldatarequired

evm.v4_hook_permissions

Uniswap v4 hook permissions: compute the 14-bit permission field from hook-call names, or decode the field from a hook address (bits live in the LOW 14 bits: address & 0x3FFF). [web3 · v1.0.0 · deterministic: true · permissions: none]

Parameterscallsaddress

erc4626.math

Exact EIP-4626 vault math in BigInt: convert assets to shares (round down) and shares to assets (round down), with optional virtual offsets. [defi · v1.0.0 · deterministic: true · permissions: none]

ParametersamountrequireddirectiontotalAssetsrequiredtotalSupplyrequiredvirtualAssetsvirtualShares

timestamp.convert

Convert Unix seconds/milliseconds to ISO 8601 (UTC) and back. [dev · v1.0.0 · deterministic: true · permissions: none]

Parametersisovalue

regex.test

Test a regular expression against text: match result plus all capture groups. [dev · v1.0.0 · deterministic: true · permissions: none]

Parameterstextrequiredflagspatternrequired

case.convert

Convert an identifier between camelCase, snake_case, kebab-case, CONSTANT_CASE, and Title Case. [dev · v1.0.0 · deterministic: true · permissions: none]

Parameterstotextrequired

hex.encode

Encode text to hex, or decode hex (with or without 0x) to text. [data · v1.0.0 · deterministic: true · permissions: none]

Parametershextext

evm.checksum_address

EIP-55 checksum an Ethereum address, or verify a checksummed one. [web3 · v1.0.0 · deterministic: true · permissions: none]

Parametersaddressrequired

evm.unit_convert

Convert EVM amounts between wei, gwei, and ether with exact BigInt math. [web3 · v1.0.0 · deterministic: true · permissions: none]

Parameterstofromvaluerequired

formatho.registry

List every registered Formatho tool with version, category, deterministic flag, permissions, and Formatho Verified status. [meta · v1.0.0 · deterministic: true · permissions: none]

Takes no parameters.

Version history

1
  1. v0.3.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.